10-26-2006 01:06 AM - edited 03-03-2019 02:28 PM
My question are:
When two routers initiate BGP session, is there any rule who will actively try first to estabilish the BGP session and the other end wait to receive the initation?
If there isn't such a rule, can it be adjusted for one end to try first?
Thank you,
Jinhong
10-26-2006 03:04 AM
i dont know any means of blocking that in BGP, but you can block it using access-lists on your interface. BGP uses TCP port 179 which if you block it one way using a firewall to allow only one of them to initiate the connection always.
10-26-2006 04:39 AM
Thank you naveen,
Fistly, I didn't mean if any security feature can do that. But I just wanted to know its nature of initiation who will try first and if is there any option to satisfying this, command, to control one end initiate the session first and the other waits and reply to the initiation of the end initiating the session.
Thank you again naveen,
Any reply will be welcomed.
10-26-2006 04:49 AM
You can use the following command to control which peer establishes the BGP session:
RouterA(config-router)#neighbor 2.2.2.2 transport connection-mode ?
active Actively establish the TCP session
passive Passively establish the TCP session
Both peers are in active mode by default.
Hope this helps,
10-28-2006 06:48 PM
Thank you Hritter,
On Cisco 2600, IOS 12.3, I tried as your instruction and follows are the result.
As you can see there aren't such commands.
Your following comment will be highly appreciated
Regards,
Jinhong
Router(config-router)#neighbor 1.1.1.1 transport connection-mode passive
^
% Invalid input detected at '^' marker.
Router(config-router)#neighbor 1.1.1.1 transport connection-mode active
^
% Invalid input detected at '^' marker.
Router(config-router)#
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide